diff options
| -rw-r--r-- | modules/nixos/server/default.nix | 3 | ||||
| -rw-r--r-- | systems/atlas/nginx.nix | 19 |
2 files changed, 4 insertions, 18 deletions
diff --git a/modules/nixos/server/default.nix b/modules/nixos/server/default.nix index 3e9780e..a33b950 100644 --- a/modules/nixos/server/default.nix +++ b/modules/nixos/server/default.nix @@ -6,7 +6,8 @@ ... }: { imports = [ - ./acme.nix + # disabled since i use cloudflare tunnels + #./acme.nix ./secrets.nix ]; diff --git a/systems/atlas/nginx.nix b/systems/atlas/nginx.nix index 626b4b3..dc40282 100644 --- a/systems/atlas/nginx.nix +++ b/systems/atlas/nginx.nix @@ -1,8 +1,4 @@ -{ - config, - lib, - ... -}: let +{config, ...}: let inherit (config.networking) domain; mkProxy = endpoint: port: { @@ -11,17 +7,6 @@ proxyWebsockets = true; }; }; - - mkVHosts = let - commonSettings = { - enableACME = true; - # workaround for https://github.com/NixOS/nixpkgs/issues/210807 - acmeRoot = null; - - addSSL = true; - }; - in - lib.mapAttrs (_: lib.recursiveUpdate commonSettings); in { server.services.cloudflared.enable = true; @@ -34,7 +19,7 @@ in { recommendedProxySettings = true; recommendedTlsSettings = true; - virtualHosts = mkVHosts { + virtualHosts = { "cache.${domain}" = { locations = mkProxy "/" "5000"; }; |